Ignore DISCOVERs from a certain MAC?

Glenn Satchell Glenn.Satchell at uniq.com.au
Mon Jul 16 13:23:58 UTC 2007


The rogue requests could be coming from Windows Remote Access (RAS).
You could try disabling that service on the windows box. RAS tries to
get up to 10 IP addresses via dhcp so that it can use them for clients
that want to use the remote access.

If you use a packet sniffer to look at the packet contents the client
identifier will contain the string "RAS".

regards,
-glenn

>From: Tina Siegenthaler <tina at zool.uzh.ch>
>Subject: Re: Ignore DISCOVERs from a certain MAC?
>Date: Mon, 16 Jul 2007 14:29:00 +0200
>To: dhcp-users at isc.org
>
>aah, yes.... I'll try that right now. Guess I've been searching too  
>far. Thanks!
>
>Tina
>
>
>Am 16.07.2007 um 14:26 schrieb Simon Hobson:
>
>> Tina Siegenthaler wrote:
>>
>>> Maybe someone of you can help me... I want my DHCP-Server to ignore
>>> DISCOVERs that are issued by a certain MAC address. Why this?
>>>
>>> I keep getting DISCOVERS on my DHCP server from a MAC address
>>> 00:14:22:72:6d:cb - about every minute or so. Like this:
>>>
>>> Jul 16 13:27:32 DHCP-0352 dhcpd: DHCPDISCOVER from 00:14:22:72:6d:cb
>>> via 130.60.23.1: peer holds all free leases
>>
>> How about :
>>
>> host bad_device {
>>    hardware ethernet 00:14:22:72:6d:cb ;
>>    ignore booting ;
>> }
>>
>>
>
>
>
>
>
>**********************************************
>Dr. Tina Siegenthaler
>
>IT support
>
>Institute of Zoology
>University of Zurich
>Winterthurerstr. 190
>8057 Zürich
>
>tel : ++41 44 6354891
>email: tina at zool.uzh.ch
>**********************************************
>
>
>
>
>


More information about the dhcp-users mailing list